As of September 2026
This English version is provided for convenience. The German version is legally binding.
HTMLHELD is a service of Alphaformat UG (haftungsbeschränkt). The controller responsible for processing personal data on this website is:
Alphaformat UG (haftungsbeschränkt) Ohlmüllerstr. 14 81541 München
Office: Freibadstraße 30, 81543 München Represented by the Managing Director Stefan Levin Email: info@htmlheld.de
We process personal data on the following legal bases of the General Data Protection Regulation (GDPR):
Each of the following sections states which legal basis applies to which processing.
For this website, our support system, our domains and our emails we use the infrastructure of two providers: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, and webgo GmbH, Wendenstraße 8-12, 20097 Hamburg, Germany. The servers are located in Germany. We have concluded data processing agreements with both providers pursuant to Art. 28 GDPR. To the extent that the providers also process data under their own responsibility, for example for the operation and security of their data centers and networks, we have no influence on this. The privacy notices of Hetzner and webgo apply to that processing.
Each time a page is accessed, the server automatically stores the following data in log files (server log files):
This data is technically necessary to deliver the website and to ensure its secure and stable operation. We do not combine it with other data sources. The legal basis is Art. 6(1)(f) GDPR. The server log files are deleted automatically after 14 days at the latest.
When you write to us using the contact form, we process:
We only receive this information if you fill in and submit the form yourself. We point this out above the submit button. We store it on our server and in our backups and use it only to handle your request and any follow-up questions. We do not pass it on to third parties. If you write to us by email, the same applies to your message and the information it contains. Our mailboxes and the sending of our emails, such as appointment confirmations, are operated on our behalf by an email service provider with servers in Germany.
The legal basis is Art. 6(1)(b) GDPR if your request concerns a contract with us or its initiation, otherwise Art. 6(1)(f) GDPR (our interest in answering requests). We store the time, IP address and browser identifier for technical reasons only, on the basis of Art. 6(1)(f) GDPR, to prevent misuse of the form and to be able to prove receipt of a request. We do not analyze them.
The data remains with us until you request its deletion or the purpose no longer applies. Statutory retention periods remain unaffected.
On the Contact page, you can book a meeting directly with us. The calendar runs on our own server; no data is transferred to third parties.
In doing so, we process your name, email address and phone number, the type of call you choose (phone or video), the date and time, the address of your website and your request, as well as the time of the booking and of its confirmation. To protect against misuse, we store your IP address and browser identifier with the booking (Art. 6(1)(f) GDPR); we do not analyze them.
After booking, you receive an email with a link to confirm or cancel the appointment. If the appointment is not confirmed, it expires. Before a confirmed appointment, we send you reminders. If the call takes place by video, we use a room at Whereby (Video Communication Services AS, Norway); the connection is only established when you open the link to the call, and the Whereby privacy notice then applies.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request). We delete the booking data six months after the appointment, after a cancellation or after expiry. If a contract results, the periods set out in section 7 apply.
On the Conclude a maintenance contract page, you can conclude a maintenance contract online. This also applies when you add another website to maintenance in the customer area. In doing so, we process:
The checksum proves that the stored contract text has not been changed afterwards. We only generate the PDF with your information for printing if you request it. It is not stored.
We process this data to conclude the contract, to prove its conclusion and to set up the maintenance. The legal basis is Art. 6(1)(b) GDPR. For proof of the conclusion of the contract, Art. 6(1)(c) GDPR (statutory retention obligations) and Art. 6(1)(f) GDPR (our interest in being able to prove the conclusion of the contract) also apply.
We store the data for the term of the contract and thereafter for as long as the statutory retention periods under commercial and tax law require, i.e. up to 10 years. We delete the access details for WordPress, FTP and hosting when the contract ends.
The customer area with the ticket system is a separate application. A separate privacy policy applies to it.
In accordance with the legal requirements, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
This website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar of your browser begins with “https://” and shows a lock icon.
Under Art. 15 to 21 GDPR, you have the following rights with respect to us:
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object to this processing at any time on grounds relating to your particular situation.
There is no automated decision-making, including profiling (Art. 22 GDPR).
To exercise your rights, write to info@htmlheld.de.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach
We update this privacy policy when our website, our processing or the legal requirements change. The version published here at the time applies.